GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, metrics-server-fips, nri-prometheus, prometheus-node-exporter, prometheus-blackbox-exporter, kubeflow-fips, kpt, thanos-operator, node-problem-detector, kubewatch, falcoctl, falcoctl-fips, weaviate, amass, kube-logging-operator,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: flux-source-controller, k3d, metacontroller, secrets-store-csi-driver-provider-gcp, kots, slsa-verifier, ollama, metrics-server, flux-notification-controller, kubewatch, nats, terraform-provider-azurerm, nri-prometheus, dynamic-localpv-provisioner, nodetaint, frp,...

chai (=4.0.0-canary.1), chai-project (=1.0.0) +2 more potentially affected by CVE-2023-43646 via get-func-name (>=1.0.0 <=2.0.0)

get-func-name NPM version =1.0.0, =1.0.1, =1.0.0, =1.0.4 Source cves: CVE-2023-43646 Source advisory: OSV:GHSA-4Q6P-R6V2-JVC5...

mc-safeways.de Cross Site Scripting vulnerability OBB-3638597

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in mc-dxp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5e1d1ce854f3d738b8c31b31ebec021661db3328cba71ffcbb8a8f9f2377b97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7958 Malicious code in mc-dxp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5e1d1ce854f3d738b8c31b31ebec021661db3328cba71ffcbb8a8f9f2377b97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

mc-6411c2dd-ed8a-41b8-8a34-7690-cd.azurewebsites.net Cross Site Scripting vulnerability OBB-3552436

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mc-nett.no Cross Site Scripting vulnerability OBB-3549121

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Cross site scripting

Cross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to execute arbitrary code via a crafted script to the mc parameter of the URL...

CVE-2023-36163

Cross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to execute arbitrary code via a crafted script to the mc parameter of the URL...

PT-2023-25463 · Unknown · Ip-Dot Buildagate

Name of the Vulnerable Software and Affected Versions: IP-DOT BuildaGate version BuildaGate5 Description: The issue allows a remote attacker to execute arbitrary code via a crafted script to the mc parameter of the URL. This is a Cross Site Scripting vulnerability. Recommendations: For IP-DOT...

Exploit for Cross-site Scripting in Buildagate_Project Buildagate

Exploit Title: BuildaGate5library - Reflected Cross-Site Scrip...

mc-nett.no Cross Site Scripting vulnerability OBB-3469646

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mc-6411c2dd-ed8a-41b8-8a34-7690-cdn-endpoint.azureedge.net Cross Site Scripting vulnerability OBB-3440795

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2025-38212

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2-rc5-00047-g7c46948a6e9c Description A flaw exists in the Linux kernel related to the fsl-mc bus driver. Changes introduced by VFIO caused the creation of a pseudo-device as a child of fsl-mc devices, leading ...

CVE-2022-41610

Improper authorization in IntelR EMA Configuration Tool before version 1.0.4 and IntelR MC before version 2.4 software may allow an authenticated user to potentially enable denial of service via local access...

Authorization

Improper authorization in IntelR EMA Configuration Tool before version 1.0.4 and IntelR MC before version 2.4 software may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-41610

Improper authorization in IntelR EMA Configuration Tool before version 1.0.4 and IntelR MC before version 2.4 software may allow an authenticated user to potentially enable denial of service via local access...

Intel® EMA Configuration Tool and Intel® MC Software Advisory

Summary: A potential security vulnerability in Intel® Endpoint Management Assistant EMA Configuration Tool and Intel® Manageability Commander MC software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID:...

CLSA-2023-1683146027 kernel: Fix of 23 CVEs

media: rc: Fix use-after-free bugs caused by enetxirqsim CVE-2023-1118 - net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26545 - net/ulp: prevent ULP without clone op from entering the LISTEN status CVE-2023-0461 - Bluetooth: L2CAP: Fix u8 overflow CVE-2022-45934 -...